magic-extractor v1.3.1

Universal Windows extraction tool that detects unknown files and routes them to the right bundled extractor.
Read more...

The Best-Paying Bug in Bounty Isn’t the One Everyone Hunts

4,590 disclosed reports. Eleven bug types. The crowd is hunting where the money isn’t.Continue reading on Medium »
Read more...

cottage v0.7.0

A modern git based age-encrypted secrets manager for teams.
Read more...

cdncheck v1.2.50

A utility to detect various technology for a given IP address.
Read more...

Hackers Don’t Need Zero-Days Anymore: How Misconfigurations, IAM & Broken Logic Become Critical

Every time a breach makes headlines, someone asks “was it a zero-day?” Almost every time, the honest answer is no.Continue reading on Medium »
Read more...

The Best-Paying Bug in Bounty Isn’t the One Everyone Hunts
https://medium.com/@rajnamdev/the-best-paying-bug-in-bounty-isnt-the-one-everyone-hunts-878568269b67?source=rss------bug_bounty-5

4,590 disclosed reports. Eleven bug types. The crowd is hunting where the money isn’t.Continue reading on Medium » (https://medium.com/@rajnamdev/the-best-paying-bug-in-bounty-isnt-the-one-everyone-hunts-878568269b67?source=rss------bug_bounty-5)

Hackers Don’t Need Zero-Days Anymore: How Misconfigurations, IAM & Broken Logic Become Critical
https://medium.com/@bugitrix/hackers-dont-need-zero-days-anymore-how-misconfigurations-iam-broken-logic-become-critical-293df09deaf4?source=rss------bug_bounty-5

Every time a breach makes headlines, someone asks “was it a zero-day?” Almost every time, the honest answer is no.Continue reading on Medium » (https://medium.com/@bugitrix/hackers-dont-need-zero-days-anymore-how-misconfigurations-iam-broken-logic-become-critical-293df09deaf4?source=rss------bug_bounty-5)

Crack the Gate 1 — picoCTF Write-up | Authentication Bypass via Hidden HTTP Header

IntroductionContinue reading on Medium »
Read more...

cli v1.1307.0

Snyk CLI scans and monitors your projects for security vulnerabilities.
Read more...

Nest v2026.08.24

Your gateway to OWASP. Discover, engage, and help shape the future!
Read more...

apex v2.4.0-canary.d5c18874

AI-powered offensive security testing using autonomous agents, directly in your terminal.
Read more...

cloudprober v0.14.5

An active monitoring software to detect failures before your customers do.
Read more...

DakshSCRA v0.38-beta

Framework-aware static code analysis tool for automated source code review with platform-specific rules, taint analysis, effort estimation, and suppression baselines.
Read more...

AppEnumGuard v1.2

CVE-2025-31207 mitigation and sandboxed tester for rootless and rootHide jailbreaks on iOS 15–18.4.1
Read more...

httrack v3.49.24

Offline website copier that recursively downloads HTML, images, and files to create a browsable local mirror, with support for resuming and updating existing mirrored sites.
Read more...

promptfoo v0.122.1

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
Read more...

semgrep v1.175.0

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Read more...